CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2023-24140

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetworkDiag function.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.015

EPSS Ranking 79.8%

CVSS Severity

CVSS v3 Score 9.8

References

https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagPingNum/setNetworkDiag_NetDiagPingNum.md
https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagPingNum/setNetworkDiag_NetDiagPingNum.md

Products affected by CVE-2023-24140

Totolink » Ca300-Poe » Version: N/A

cpe:2.3:h:totolink:ca300-poe:-
Totolink » Ca300-Poe Firmware » Version: 6.2c.884

cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-24140

Products

Pricing

Contact Us